Islington Council

Islington Council faced a massive data breach incident that unencrypted the personal information of almost 90,000 people.

A London municipality was fined £70,000 after it unintentionally released a stockpile of personal information that included medical information, check information, and even one person's criminal history.

The information was retained as part of Islington Council's Ticket Viewer system, which enables customers to view a CCTV image or video of their alleged parking infraction.

The data revealed the medical problems of some persons who were appealing parking charges.

According to the Information Commissioner's Office's inquiry, design flaws resulted in the compromise of a sizable amount of personal data.

Source: https://www.standard.co.uk/news/london/islington-council-faces-huge-fine-after-massive-data-breach-hit-90-000-people-a3613981.html

TPRM report: https://scoringcyber.rankiteo.com/company/islington-council

"id": "isl114181122",
"linkid": "islington-council",
"type": "Breach",
"date": "08/2017",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '90,000',
                        'industry': 'Public Administration',
                        'location': 'London',
                        'name': 'Islington Council',
                        'type': 'Government'}],
 'attack_vector': 'Design Flaws',
 'data_breach': {'data_encryption': 'No',
                 'number_of_records_exposed': '90,000',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Medical Information',
                                              'Check Information',
                                              'Criminal History']},
 'description': 'Islington Council faced a massive data breach incident that '
                'unencrypted the personal information of almost 90,000 people.',
 'impact': {'data_compromised': ['Medical Information',
                                 'Check Information',
                                 'Criminal History'],
            'systems_affected': 'Ticket Viewer System'},
 'investigation_status': 'Completed',
 'post_incident_analysis': {'root_causes': 'Design Flaws'},
 'references': [{'source': "Information Commissioner's Office"}],
 'regulatory_compliance': {'fines_imposed': '£70,000'},
 'title': 'Islington Council Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Design Flaws'}